4a2be3af52f74b5f5120b8431e5610b8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
4a2be3af52f74b5f5120b8431e5610b8_JaffaCakes118
Size 488KB
Sample241015-1pyvasyfpb
SHA256 b57fd996f2bcb3d3c09ead04b388a9fc619018985e26be74a65efbb4487462e2
MD5 4a2be3af52f74b5f5120b8431e5610b8
SHA1 397f18e3d2a592bf479d35c82e7a76a5d3391967
SHA512 2eebb9f8f4b041599e4b17156b3fba377b36a2bb08bf0f7b78b503bcc7c34a53cb2fcf3fceb1efb3cdd24e82b00a9f4f24eaeed6caa5f348a4be5d84e54a1448
SSDEEP 12288:T33Q9q2bGUVa0eJqj6ACNTuihvSlqP37lCMtB64zg:T3bcGUVZeJWUNTThqIP37lh/fzg
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a2be3af52f74b5f5120b8431e5610b8_JaffaCakes118

File Explorer

4a2be3af52f74b5f5120b8431e5610b8_JaffaCakes118

.exe 488KB

4a2be3af52f74b5f5120b8431e5610b8_JaffaCakes118

IMPHASH d7b3095a63f250b52ed7436dcc691cab
SHA256 b57fd996f2bcb3d3c09ead04b388a9fc619018985e26be74a65efbb4487462e2
MD5 4a2be3af52f74b5f5120b8431e5610b8
SHA1 397f18e3d2a592bf479d35c82e7a76a5d3391967
SHA512 2eebb9f8f4b041599e4b17156b3fba377b36a2bb08bf0f7b78b503bcc7c34a53cb2fcf3fceb1efb3cdd24e82b00a9f4f24eaeed6caa5f348a4be5d84e54a1448
SSDEEP 12288:T33Q9q2bGUVa0eJqj6ACNTuihvSlqP37lCMtB64zg:T3bcGUVZeJWUNTThqIP37lh/fzg
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

47085

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateDirectoryA GetFileAttributesA FindClose FindNextFileA FindFirstFileA GetProcessHeap SetFileTime MoveFileA WriteFile SetFilePointer GetFileSize GetTickCount CreateFileA EnterCriticalSection LeaveCriticalSection lstrcmpA lstrcatA lstrcpyA LockResource LoadResource SizeofResource FindResourceA GetCurrentThreadId lstrlenW GetModuleHandleA GetModuleFileNameA WideCharToMultiByte FreeLibrary LoadLibraryExA lstrcmpiA lstrcpynA IsDBCSLeadByte GetCommandLineA GetLogicalDriveStringsA GetLastError GetLogicalDrives GetEnvironmentVariableA OpenMutexW GetVolumeInformationA GetProcAddress LoadLibraryA OpenProcess Process32Next Process32First CreateToolhelp32Snapshot DeviceIoControl SetEndOfFile Sleep CreateFileMappingA InterlockedIncrement InterlockedDecrement lstrlenA SetFileAttributesA CopyFileA GetCurrentDirectoryA MoveFileExA DeleteFileA CreateProcessW GetWindowsDirectoryA GetSystemDirectoryA WinExec CreateEventA CreateProcessA WaitForSingleObject CloseHandle GetShortPathNameA MultiByteToWideChar DeleteCriticalSection InitializeCriticalSection RaiseException GetVersionExA GetThreadLocale GetLocaleInfoA GetACP SetStdHandle GetStringTypeW GetStringTypeA IsBadCodePtr IsBadReadPtr GetEnvironmentStringsW InterlockedExchange SetPriorityClass ExitProcess RtlUnwind HeapFree GetSystemTimeAsFileTime HeapAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId TlsAlloc SetLastError TlsFree TlsSetValue TlsGetValue SetUnhandledExceptionFilter HeapDestroy HeapCreate VirtualFree IsBadWritePtr LCMapStringA LCMapStringW GetOEMCP GetCPInfo TerminateProcess GetCurrentProcess HeapSize ReadFile SetHandleCount GetStdHandle GetFileType FlushFileBuffers UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW

user32

LoadStringA DestroyWindow CharNextA DefWindowProcA

advapi32

ChangeServiceConfigA GetUserNameA OpenProcessToken RegNotifyChangeKeyValue RegSetValueA RegQueryValueA RegGetKeySecurity RegOpenKeyA RegEnumValueA RegSetValueExA RegEnumKeyExA RegQueryInfoKeyA RegOpenKeyExA RegCloseKey RegDeleteValueA RegCreateKeyExA RegDeleteKeyA RegCreateKeyA OpenSCManagerA OpenServiceA StartServiceA QueryServiceStatus CloseServiceHandle CreateProcessAsUserW InitializeSecurityDescriptor SetSecurityDescriptorDacl RegSetKeySecurity

ole32

CoTaskMemFree CoTaskMemRealloc CoUninitialize CoInitialize CoCreateInstance CoTaskMemAlloc

oleaut32

VarUI4FromStr

setupapi

SetupIterateCabinetA

comctl32

InitCommonControlsEx

Sharing

General

Malware Config

Signatures

File Explorer

4a2be3af52f74b5f5120b8431e5610b8_JaffaCakes118

kernel32

user32

advapi32

ole32

oleaut32

setupapi

comctl32

generic